Conduct comprehensive security assessment, penetration testing and vulnerability scanning of Web applications to identify potential security vulnerabilities and risk points. Provide professional security consulting and guidance during the product development lifecycle. Perform security audits on existing codes to discover and fix potential security defects. Participate in the construction and optimization of the company's security defense system. Participate in the response, analysis and processing of security incidents.